This vulnerability (CWE-532) in Veeam Backup and Replication 13 allows sensitive information to be written into log files improperly. This exposure can be leveraged by an attacker with local access and some privileges to escalate their privileges on the affected Windows system. The CVSS 4.0 vector indicates low attack complexity and privileges required, with high impact on confidentiality, integrity, and availability. No official fix or patch has been documented in the vendor advisory or patch links provided.

Successful exploitation could allow an attacker with local access to escalate privileges by leveraging sensitive data exposed in log files. This could compromise system confidentiality, integrity, and availability. However, exploitation requires local privileges and no public exploits are currently known.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity related to privilege escalation attempts. Avoid exposing log files containing sensitive information to untrusted users.